Slashdot Mirror
Strong Passwords Not As Good As You Think
Jamie noticed that Bruce Schneier wrote a piece on a paper on strong passwords that tells us that the old 'strong password' advice that many of us (myself included) regard as gospel might not be as true as we had hoped. They make things hard on users, but are useless against phishing and keyloggers. Everyone can change their password back to 'trustno1' now.
surely we should all be changing our passwords back to "Joshua"?
Slashdot is an excellent source of many of these sentences, as with spelling mistakes they're even harder to brute-force.
I sometimes set my password to ******** It sounds stupid but it has two advantages:
1. I know that I've typed in a * because I can see it
and, most importantly
2. When I have to repeat my password to confirm it, I can just copy and paste the previous field, saving me literally seconds of typing
Summation 2
1-2-3-4-5? That's amazing. I've got the same combination on my planetary air shield!
Most of mine are planar...
rj
It's a sticky note with gibberish on the monitor. What could it be.
A friend of mine had a genuinely clever idea for a password: The serial key on the back of the monitor of the guy sitting opposite of him. He has it right in front of him, it's completely impossible to guess, no sticky note giving it away and yet it's written down and won't go away or get lost.
He only has to call IT every other year when they upgrade monitors.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
"lepassword"?
I know! And "Area51" is like the only dictionary-like password within the constraints you describe, so I can crack the system in a single guess! And I'm practically guaranteed to get classified information with that kind of password!